Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [cipher]

68 questions
1
vote
1 answer

Websphere MQ 7.0.1-14 - able to add missing ssl cipher suites?

I have to connect to a MQ 9 QMGR, which does not allow the available Cipher Suites I can choose from in MQ Explorer that is part of my 7.0.1-14 installation (Linux x86_64). Can I add the needed Cipher Suites without upgrading to a newer MQ…
sebkoe
  • 47
  • 9
1
vote
2 answers

Reclaim deleted space on SAN from thin provisioned LUN with zeros on Windows

Dear Data Storage Experts, We are using a SAN attached thin-provisioned LUN on Physical Windows machine from a storage vendor. Storage chargeback is based on high watermark (deleted space not reclaimed properly). Consider following scenario: 500GB…
Makhu
  • 45
  • 1
  • 1
  • 9
1
vote
0 answers

Troubleshooting Cipher handshake issue

All right, so I have work with our networking engineers and it just appears that nobody is able to figure this issue out and so I'm all out of options as I have attempted to Google research this issue to death with no avail. So with that being said,…
Ryan Wakefield
  • 11
  • 1
1
vote
3 answers

Postfix not using TLS ciphers it is supposed to use

I can't receive emails from certain hosts because of a no shared cipher error: postfix/smtpd[15934]: warning: TLS library problem: error:1408A0C1:SSL routines:SSL3_GET_CLIENT_HELLO:no shared cipher:s3_srvr.c:1440: I am using this postfix settings…
Finn
  • 219
  • 2
  • 15
1
vote
1 answer

Best practice: Wowza SSL Configuration

Screenshot: Server with Wowza running using a SSL certificate with basis configuration I get this result from the SSLLabs with the default configuration (see screenshot). The only places I can change the configuration is probably the VHost.xml where…
Thomas Ebert
  • 143
  • 5
1
vote
1 answer

RHEL ports not using same cipher

[UPDATE] I ran the openssl command from a couple servers and my local machine. It seems like port 9443 is not remaining consistent. The cipher on server1:9443 remained the same from the first server (RHEL5) I queried from. However, querying from my…
Ian
  • 71
  • 5
1
vote
0 answers

Configure VPN ciphers on Mac OS Server

I'm trying to harden the L2TP/IPSec VPN on an El Capitan server. All the resources I can find either just walk you through the basic setup (adding a shared key, etc.) or are for third-party servers. The closest I found was this question, but it only…
CBHacking
  • 191
  • 3
1
vote
1 answer

Centos/Fedora cipher suites

I created a self signed certificate on my Fedora CLI server using the openssl command openssl req -x509 -sha256 -newkey rsa:2048 -nodes -keyout key.pem -out cert.pem -days 100 From my understanding, this is how TLS works: Client sends cipher suite…
james b
  • 11
  • 1
1
vote
1 answer

Adobe ExtendScript http request fails: no shared cipher

For my Adobe CEP project I try to call to a REST API over https from the Javascript side: var xmlhttp = new XMLHttpRequest(); xmlhttp.open('GET', 'https://***/api/books', true); xmlhttp.setRequestHeader('Authorization', 'Basic…
Jens
  • 121
  • 4
1
vote
0 answers

What is the correct way to secure a user directory with EFS not in a domain network?

Logged in as an administrator on a Windows 10 machine. cipher /E /A /S:C:\Users\MYUSER or cipher /E C:\Users\MYUSER I've read and been told that the bottom one is the correct way. End result: Encrypt all the files and ensure new and copied files…
user3287817
  • 11
  • 1
1
vote
1 answer

How to **keep** my SSLCipherSuite list for my LAMP stack current?

I have been running several LAMP servers for 5+ years with Let's Encrypt certs. Today, I did the SSL test by Qualys https://www.ssllabs.com/ssltest/index.html to learn that I had lost my coveted A+ because the ever-evolving cipher-suites list had…
wruckie
  • 678
  • 6
  • 22
1
vote
1 answer

ssh sftp which cipher is used

on a debian shell i can connect to a sftp by: ( connection established, i see the sftp prompt ) sftp -i /keys/mykey user@1.2.3.4 i want to change to sftp -oCiphers=aes256-ctr -i /keys/mykey user@1.2.3.4 used in a script. how can i see, what cipher…
FatFreddy
  • 125
  • 1
  • 5
1
vote
0 answers

Adding Ciphers to Server 2012 R2

I need to add the following Ciphers to my server: TLS_DHE_RSA_WITH_AES_128_GCM_SHA256 TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 I found the following article: https://docs.microsoft.com/en-us/windows-server/security/tls/manage-tls However, it's not…
JustAGuy
  • 639
  • 3
  • 23
  • 38
1
vote
2 answers

TLS 1.2 with RSA vs ECDSA Ciphers

Microsoft has reported that it will only support TLS 1.2 with at least one of the following…
Jonathan Montgomery
  • 11
  • 1
  • 3
1
vote
0 answers

SSL Cipher Suites in nginx do not match SSL Labs

I am trying to install this plugin on Wordpress which fails to communicate with my server, and the plugin developer says it's because my cipher suites don't match their requirement. https://www.polipayments.com/Nudge (requirements at the…
Jamie Sutton
  • 11
  • 2
1
2
3 4 5